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Abstract 



o 

We introduce a subexponential algorithm for geometric solving of multivariate poly- 
nomial equation systems whose bit complexity depends mainly on intrinsic geomet- 
ric invariants of the solution set. ^From this algorithm, we derive a new procedure 
for the decision of consistency of polynomial equation systems whose bit complex- 
ity is subexponential, too. As a byproduct, we analyze the division of a polynomial 
modulo a reduced complete intersection ideal and from this, we obtain an intrinsic 
lower bound for the logarithmic height of diophantine approximations to a given 
solution of a zero-dimensional polynomial equation system. This result represents 
a multivariate version of Liouville's classical theorem on approximation of alge- 
braic numbers by rationals. A special feature of our procedures is their polynomial 
character with respect to the mentioned geometric invariants when instead of bit 
operations only arithmetic operations are counted at unit cost. Technically our pa- 
per relies on the use of straight-line programs as a data structure for the encoding 
of polynomials, on a new symbolic application of Newton's algorithm to the Im- 
plicit Function Theorem and on a special, basis independent trace formula for affine 
Gorenstein algebras. 
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1 Introduction 



The present pages represent a continuation of [24,25,43]. These papers con- 
cern the design of algorithms of intrinsic type to solve systems of polynomial 
equations. Solving is then applied to decide consistency of systems of poly- 
nomial equations. By "intrinsic type" we mean algorithms which are able to 
distinguish between the semantical and the syntactical character of the input 
system in order to profit from both for the improvement of the complexity 
estimates. 

With respect to bit complexity we show how the time necessary to solve a given 
polynomial equation system is related to the affine degree and the (affine) log- 
arithmic height of the corresponding diophantine variety. In this sense, the 
results of [24] and [25] show already that the (affine) degree of an input sys- 
tem is associated with the complexity when measured in terms of number 
of arithmetic operations. However, there are still some drawbacks in this ap- 
proach. 

The first one is that the algorithms developed in [25] require iterative calls 
to the procedure and that the algorithms in [24] rely on the use of algebraic 
numbers. Thus in the case of [24] the algorithms are not "rational" although 
their inputs and outputs are. 

A second drawback concerns the modeling used to measure complexity. The 
quantity of arithmetic operations of an algorithm does not explain sufficiently 
what happens when we are using it on a "real life" computer. Years of expe- 
rience show that models of bit complexity (Turing machines, random access 
machines or equivalent models) represent more realistic patterns for practical 
computing. In this sense a study of bit complexity of the intrinsic complexity 
of the algorithms of [24] and [25] becomes necessary. 

In the present paper we deal with both disadvantages of the algorithms in 
[24] and [25], giving practicable solutions (cf. also Section 3 below). First, 
our new algorithm is completely rational. It does not require any constants 
other than those in the field of coefficients of the input system. Secondly, to 
improve the bit complexity estimates, we introduce a suitable notion of height 
of affine diophantine varieties which is inspired by the corresponding notion 
introduced for projective varieties in [5,9,21,41,42,44-47]. As shown in Section 
2, our notion of height is strongly related to the bit complexity of geometric 
elimination procedures of any kind. 

Our notion of height combined with a new algorithmic interpretation of du- 
ality theory for complete intersection ideals yields a new Liouville estimate 
(cf. Sections 7 and 4 below). Liouville estimates can be applied to get lower 
time bounds for the numerical analysis approach to solving systems of polyno- 



2 



mial equations. In particular, we show the practical inefficiency of both floating 
point and binary encoding for rational approximation of zero-dimensional mul- 
tivariate polynomial equation systems even in the algorithmically well suited 
cases. 

To illustrate these introductory observations, let us first consider the following 
two problems: 

Problem 1 Let be given a sequence ofn integer polynomials of degree at most 
3, with coefficients in {0, 1} ; concerning three variables each: 

X 1)3 ), . . . ,p n (X n>1 , X nj2 , X n ^) 
Decide whether the following system of polynomial equations has a solution: 

X 2 -X 1 =0,...,X 2 -X n = 0,Y 2 -Y 1 =0,...,Y 3 2 n -Y 3n = 

n 3n 

Y[ Pl (x hl ,x h2 ,x h3 ) - (i + J2 Y i 2j ) = o 
i=i j=i 

Problem 2 Let be given in binary representation an integer k G IN and the 
polynomials: 

X\ — X\ — 0, . . . , X 2 — X n = 

k - (Xi + 2X 2 H h 2 n ~ 1 X n ) = 

Decide whether this system has a solution. 

Both problems have a similar "syntactical form" (i.e. they look very similar, 
as a consistency question for "syntactically easy" polynomial equation sys- 
tems). However, they possess completely different "semantical" characters : 
the first problem is a translation of a well-known NP-complete problem (3- 
satisfiability, for short 3SAT), while the second one just concerns the binary 
encoding of k with n bits (if there exists such an encoding). This means that 
the second system is consistent if and only if k may be encoded using at most 
n binary digits (cf. [30,43]). Traditional symbolic procedures deal with both 
problems using in each case the same generalistic treatment. However these 
two problems demand for different algorithms that may profit from their dif- 
ferent semantical features. The construction of algorithms which are able to 
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distinguish between equation systems which are semantically well suited and 
such which are not is the main goal of our paper. We shall also consider the 
question of consistency of polynomial equation systems in the following terms: 

Problem 3 (Effective Nullstellensatz) Given a sequence of polynomials 
fi, ■ ■ ■ , f s £ TL[Xi, . . . , X n ], decide whether the affine algebraic variety 

V(f u ...../;): {.r((T: A(x) = ■■■ = f s (x) = 0} 
is empty or not. 

As both Problems 1 and 2 above can be written as a special case of this 
more general Problem 3, we have to find a way to distinguish (within the 
context of Problem 3) between the different levels of difficulty Problems 1 
and 2 represent. To design algorithms which solve this problem, taking care 
of the special features of the particular instance of the input system, we need 
two major geometric invariants: the affine degree and the affine height of the 
system (cf. Section 2.2 below). Assuming these two notions we are going to 
show in this paper the following result: 

Theorem 4 There exists a bounded error probability Turing machine which 
solves the following task: given polynomials f ± , . . . , f n+1 G ffl\X\, . . . , X n ] of 
degree at most 2 and of (logarithmic) height h, the Turing machine decides 
whether the variety V(fi, . . . , f n +i) is empty or not. Moreover, if 5 is the 
intrinsic (affine) degree of the system and rj is the intrinsic (logarithmic) height 
of the system, the Turing machine answers in (bit) time 

(nh5ri)°( lo92n ^ 

using a total amount of arithmetic operations in Q of 

(n5)°W. 

Our algorithm first solves a suitable polynomial equation system and then uses 
this information for the consistency test of the original system f\,..., f n +i- 
Solving is done inductively. In order to explain the procedure let us assume 
that the polynomials fi, ■ ■ ■ , f n form a regular sequence, each ideal (/i, . . . , fi) 
1 < i < n, being radical. Then the algorithm proceeds in n steps, solving at 
each stage 1 < % < n the system /i = 0, ...,/* = 0. 

The corresponding intermediate algebraic varieties are obtained by a lifting 
process from special zero-dimensional varieties which we call the lifting fibers. 



4 



The lifting process is based on a division-free symbolic version of the Newton- 
Hensel algorithm and represents a algorithmic version of the Implicit Function 
Theorem. In this way, the procedure constructs the lifting fiber of step % + 1 
from the lifting fiber of step i. Each inductive step includes two cleaning 
phases : one is performed to throw away extraneous projective components 
(mainly those at infinity) and a second one reduces the size of the represen- 
tation of the integers which appear during the process. This second cleaning 
phase is included to avoid uncontrolled growth of integer coefficients of inter- 
mediate polynomials. 

Finally we show how the following two computational problems are related: the 
division problem in the Nullstellensatz and the numerical analysis approach 
to solving systems of multivariate polynomial equations. 

Problem 5 (Division Problem in the Effective Nullstellensatz) Let 

be given polynomials f\, . . . , f s G 7L[X\, . . . , X n ] without any common zeroes 
(i.e. the polynomials satisfy the condition V(fi, . . . , f s ) = ®), compute a non- 
zero integer a and polynomials g±, . . . , g s G 7L[X 1 , . . . , X n ] such that 

a = 9ih H 1- 9 sfs 

holds. 

Problem 6 (Numerical Analysis Approach to Solving) Given a real 
numbers > and a regular sequence of polynomials f\, . . . , / n G 2L[X\, . . . , X n ] 
of degree at most d defining a zero- dimensional affine variety 
V := V(fi, . . . , /„), compute for any point a G V an approximation a G (D n at 
level e > 0, i.e. find by an effective procedure a point a G (D such that 

\\a — a\\ < e 

holds. 

At first glance Problems 5 and 6 seem to be unrelated. However we shall 
see how the solution of Problem 5 provides lower bounds for any solution of 
Problem 6. We shall state this observation in terms of Liouville estimates. 

In order to understand the relation between Problems 5 and 6, let us observe 
that in the context of Problem 6 any approximation a computer may output 
is necessarily rational (i.e. such an approximation must be a point a belonging 
to Q [i] n )- Such an output is assumed to be encoded in binary (i.e. by the 
binary expansion of denominators and numerators of the coordinates of a). 

In the past the division problem in the Nullstellensatz was studied in both 
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number theory and computer science simultaneously. The first results mainly 
established upper bounds for the degree ([10,13,12,32]) and height ([3,4]) of 
the polynomials g 1 , . . . ,g s appearing in Problem 5. The complexity study in 
([22,33,34]) yields optimal upper bounds for both invariants (see also [19]) 
and can be applied to derive Liouville estimates in the following sense (cf. also 
Subsection 2.5 below): 

A Liouville estimate is a lower bound for the binary length (the height) of the 
numerators and denominators of the coordinates of a in terms of the variety 
V, the point a and the real number e in the statement of Problem 6 above. 
The following Theorem 7 gives such a Liouville estimate. 

Let us introduce the following notions and notations: let V C (D n be a zero- 
dimensional diophantine variety not intersecting Q [i] n and let a be a point 
of V. Let £ > be a real number. We call a point a = (^-, ..., & ) G Q \i] n a 
rational approximation of a at level e > 0, if 

| \a — a\\ < e 

holds. (Here 1 1 • 1 1 denotes the norm associated with the usual hermitian product 
in (D n ). 

A regular sequence /i, . . . , f n G 7L[Xi, . . . , X n ] is said to be smooth if for any 
1 < % < n the Jacobian J(/i, . . . , f\) is not a zero-divisor modulo the ideal 
• • • ? ft)- Observe that for a smooth regular sequence the ideals (/i, • • • , /i) 
are always radical. 

Theorem 7 There exists a universal constant C with the following property: 
given a smooth regular sequence of polynomials f\, . . . , f n e 7L[X\, . . . , X n ] of 
degree at most d and of logarithmic height at most h. Furthermore let be given 
a point a G Q [i] n and a real number < e < 1. Suppose that the variety 
V := V(fi, . . . , /„) verifies the following conditions : 

• vnQ[i] n = 0. 

• there exists a point a G V such that 

\\a — a\ | < e < 1 

/ioWs. T/ien we have for any denominator q of a the following inequality : 

—log2£ 

^-(h + ^Klogiq, 
where S denotes the degree and r\ the (affine) logarithmic height ofV. 
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PROOF. According to Proposition 20 below we have: 



e 



-l 



<7 n+ i(a)|(2||a|| + l) 




Thus, we look for upper bounds for ||o;|| and |g n+ i(a:)|. First, from Proposition 
14 below we have: 



On the other hand, combining Theorem 21 and Lemma 23 below we conclude: 



/From these two upper bounds we easily deduce the bounds of the theo- 
rem. □ 

We observe that for n = 1 Theorem 7 represents just a restatement of Liou- 
ville's classical result with somewhat coarser bounds (compare e.g. [49, Kapitel 
I, Satz 1]). 

The height estimates in [3,4,19,33] and [34], combined with the methods de- 
scribed in subsection 2.5 below (Proposition 20) produce Liouville bounds that 
relate the syntactical description of V as given by the input, the approxima- 
tion e and the height of the denominator of a. In fact, these estimates yield 
the inequality : 



On the other hand: degree and height of the solution set represent reasonable 
lower time bounds for the numerical analysis approach to polynomial equation 
solving by rational point approximation. Exponential degrees and exponential 
height produce exponential lower time bounds for numerical methods of poly- 
nomial equation solving (cf. [43]). 

A lower bound such as inequality (1) above, i.e. a lower bound for log 2 q, 
represents a lower bound for the output length and therefore a lower time 
bound for numerical methods of polynomial system solving. The results of 
[2-4,8,9,19,33,34,45-47] imply that an approximation level of e := 2 d ° (n) is 
sufficient in order to characterize (and to distinguish adequately) the solutions 
of the variety V in Problem 5. On the other hand the examples of [38, Chapitre 



(2||a|| + l) < VnS2 2v . 



log 2 \g n+1 (a)\ < (nd5) 



w (h + r] + log 2 q). 



log 2 e < d° (n) hlog 2 q 



(1) 
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4, Proposition 12] and [28,29] show that even in case of semantically and 
syntactically "easy" systems such an approximation level may be necessary. 
Therefore it becomes reasonable to fix an approximation level for numerical 
solving of £ := 2 d ™, where d n represents the Bezout number of the input 
system. Under this assumption, inequality (1) becomes meaningless and more 
precise lower bounds are required. 

However an exponential lower time bound for numerical solving is implicitly 
contained in the following corollary to Theorem 7: 

Corollary 8 Given a smooth regular sequence fi, ■ ■ ■ , f n £ Z2[-Xi, • • • , X n ], 
and points a e V , a e Q [i] n verifying the conditions of Theorem 7 above, let 
e > be a level of approximation such that —log 2 e = d n ( where d n represents 
the Bezout number of the system). Then we have 

J^c-(h + V)<lo 9 2 q , 

where C is a suitable universal constant as in Theorem 7. In particular, for 
systems of "small" degree and height, the output length for numerical solving 
methods is necessarily exponential in the number of variables. 

For instance, we consider the following smooth regular sequence of quadratic 
polynomials: 

X\ + Xi + 1, X 2 — Xf, . . . , X n — X^_ x 

This sequence defines a zero-dimensional variety with just two points (the 
degree of the variety is 2) of small height (the height is 1). Thus, for a level 
of approximation e > with —log 2 e = 2 n , the lower bound obtained from 
inequality (1) says just: 

2 n < 2 0(n) log 2 q, 

whereas the lower bound from Corollary 8 states that every rational approxi- 
mation of level e of either solution of this system has exponential binary length. 
Thus, the main consequence of this corollary is that both binary and floating 
point encoding of numbers in Q [i] are not suitable to reach the appropriate 
level of approximation. An alternative encoding is therefore required. 

Another way out of this dilemma may consist in the following approach initi- 
ated in [50] and further developed in [51-54,17,18] instead of approximating 
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rationally (or similarly by floating point arithmetic) the solutions of the zero- 
dimensional input system fi,..., / n up to the appropriate approximation level 
e = 2 d " , we just try to find approximate zeroes (in the sense of [54]) of the 
system, i.e. we try to find points a G Q [i] n from which a suitable version of 
Newton's algorithm converges quadratically to a true zero of the system. 



2 Notions, notations and Results 

We are going to study the consistency question of Problem 5 (i.e. the deci- 
sional problem in the effective Nullstellensatz) only when the input system of 
polynomial equations fi, ■ ■ ■ , f r G ffl\X\, . . . , X n ] verifies the conditions: 

• r < n + 1, 

• the sequence fi, ■ ■ ■ , f r -i is a smooth regular sequence 

These two additional conditions are not really restrictive. As shown in 
[22,23,26,33,34] an effective version of Bertini's Theorem allows to reduce a 
general input system fi, ■ ■ ■ , f s G W\X\, . . . , X n ] to such a system. We just 
have to find generic Z-linear combinations of the input polynomials such that 
these linear combinations contain only coefficients in 7L of logarithmic height 
0(n-log2(i), where n is the number of variables and d is an upper bound for the 
degrees of the input polynomials. Under the assumption of this preprocessing 
we may suppose without loss of generality that our input equations satisfy the 
following conditions: 

• the ideals (/i, . . . , fi) are radical, 1 < i < r — 1, 

• for 1 < i < r — 1 the varieties Vi = V(fi, . . . , fi) are complete intersection 
affine varieties of dimension n — i. 

Notation 1 Given R C B an extension of a commutative ring (which con- 
verts B into a R-algebra), and an element b G B, we denote by rib : B — > B 
the R-linear endomorphism induced by the multiplication of the elements of B 
by b (in the following we shall call such a linear map a homothety). If B is 
a free R-module of finite rank, we denote by Mf, the matrix of the homothety 
rjb and by Xb G R[T] the characteristic polynomial of rjb- Moreover, if R is 
a unique factorization domain, we shall denote by m& the primitive minimal 
polynomial o/r/&. Observe that\b andrrib are monic polynomials ofR[T], which 
for short we will call characteristic and minimal polynomial of b, respectively. 

In order to decide whether (fi, ■ ■ ■ , f r ) represents the trivial ideal we just need 
to compute the following items: 

• A linear change of coordinates (X 1: . . . , X n ) — >■ (Y 1: . . . , Y n ) such that the 
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following Q -algebra homomorphism represents a Noether normalization of 
the variety V(f±, . . . , f r -i), with the variables Y 1; . . . , Y n _ r+ i being free: 



R := Q [Yi, . . . , Y„_ r+1 ] — ► Q [Yi, . . . , Y n ]/(/ l5 . . . , J^) =: £. 

Observe that this means that B is an integral extension of R. 
• the matrix Mf r of the homothety r\j r with respect to an appropriate R- 
module basis. 

Suppose that such a Noether normalization is available. Then the Q -algebra 
homomorphism R — > 5 is injective and 5 is a free i?-module of rank at most 
deg V r -i (cf. [26,27]). Under this assumption the ideal (/i, . . . , f r ) is trivial if 
and only if the matrix Mf r is unimodular what means that the determinant 
of Mf r is non zero and belongs to Q . 

This comment shows how the original Problem 3 of testing consistency of poly- 
nomial equation systems can be reduced to the problem of solving polynomial 
equation system in a very specific geometric sense. In the next subsection we 
are going to explain what exactly we mean by this, namely geometric solving. 

2.1 Geometric Solving 

The previous considerations reduce the search for a consistency test for the 
polynomial equation system fi = 0, . . . , f n = 0, namely Problem 3, to the 
problem of computing a Noether normalization of the variety V(/i, • . • , f r -i) 
and the matrix Mf r of the homothety i]f r with respect to a suitable i?-module 
basis. Assume that Xi, . . . , X n are already in Noether position with respect to 
the variety V(f±, . . . , / r _i), the variables Xi, . . . , X n _ r+1 being free. Then we 
consider the following integral ring extension 

R := Q [X u . . .,X n _ r+1 ] — Q [X u . . .,X n ]/(f u f r -!) =: B. 

Our assumptions on f ± , . . . , f r _i imply that B is a reduced algebra and a finite 
free i?-module. We are now going to explain what we mean by "geometric solv- 
ing" or "geometric solution" . First we need the following notion of primitive 
element of B: 

Definition 9 Let R be a ring of polynomials over Q and R C B an integral 
ring extension such that B is reduced and B is a free R-module of finite rank. 
An element u G B is called a primitive element of the ring extension RGB 
if the degree of the minimal polynomial m u of u equals the rank of B as free 
R-module, i.e. if 
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deg m u = rank^ B 

holds. 

Let K be the quotient field of R and B' = K ®r B be the localization of B 
by the non-zero elements of R. An element u G B is a primitive element of 5 
if and only if for D := rank r B = dim k B' the set {1, u, . . . , u ' 1 } represents a 
if-vectorspace basis of B'. 

The computation of the matrix Mf r is a consequence of the following "generic 
point" description of the if-algebra B'\ this algebra is characterized by the 
following items (which our algorithm will compute): 

• a if-vectorspace basis of B' 

• for n — r + 2 < i < n the matrices Mx i of the homotheties 7]x l '■ B — > B 
with respect to the given basis (these matrices describe the multiplication 
tensor of the i^-algebra B' and hence also of the i?-algebra B) 

We then obtain the matrix M/ r+1 by substituting for the variables 
X n - r+ 2, ■ ■ ■ , X n appearing in the polynomial f r+ i(Xi, . . . , X n ) the matrices 
Mx x _ r+2 , ■ ■ ■ , Mx n - (In the sequel we shall write for short 
M fr+i = fr+i(M Xn _ r+2 , ■ ■ ■ , M Xn ) for this substitution, interpreting f r+1 as 
an element of the polynomial ring R[X n _ r+2 , . . . , X n ]). 

In this sense, geometric solving means just computing both a basis of the K- 
algebra B' and the matrices M Xn _ r+1) ■ ■ ■ , M Xn - This is done making use of a 
suitable primitive element of B. 

In the context of this paper, the primitive element u G B will always be chosen 
as the image in B of a generic /Z-linear form of the variables X n _ r+2 , . . . , X n . 
In particular, we may assume that u is the image of a linear form U = 
A n _ r+2 X n _ r+2 + • • • + A n X n , with Aj e 7L for n — r + 2 < i < n. Let T 
be a new indeterminate. The minimal polynomial m u (T) of u as an element 
of the i?-algebra B (or equivalently as an element of the if-algebra B') will 
be a monic polynomial in Q [X 1 , . . . , X n _ r+1 , T] = Q ®^ R[T]. 

We shall choose this minimal polynomial as an element of the ring 2L[Xi, . . . , X n - r+ i, T] = 
R[T]. In the sequel we shall pay special attention to the case r — n + 1, where 
we have R — 7L, K — Q and where m u is a polynomial of 7L\T] of positive 
degree (the polynomial m u is then trivially monic over Q [T] since we may 
divide it by its leading coefficient, which is a non-zero integer). Discarding the 
content (the maximum common divisor) of the coefficients of m u , we may re- 
place the minimal polynomial m u by its primitive counterpart which we shall 
always denote by q u . Similarly, for the case r < n, we shall replace the minimal 
polynomial m u G ffl\X\, . . . , X n - r+ i, T] = R[T] by some "cleaner" (however 
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not necessarily primitive) version q u . 

Finally, as {1, u, . . . , u " 1 } is a basis of the if-vector space B', for n — r + 2 < 
i < n there are polynomials G R[T] and non-zero elements p\ w ^ G R such 
that p^Xi — belongs to the ideal (/i, . . . , / r _i) in if [X n ^ r+2 , . . . , X n \. 
In particular, we have the following identity between ideals of 
K[X„- r +2, ■ ■ ■ , X n \. 

(fi, -..,/„) = {q»{U),A u) Xi ~ ^\U), . . .,p^X n - „(«>(£/)). 

Moreover, if M denotes the companion matrix of the homothety r] u with re- 
spect to the basis {1, u, . . . , m d_1 }, the matrices Mx n _ r+2 , . . . , M Xn charac- 
terizing the multiplication tensor of the i?-algebra B (or equivalently of the 
if-algebra B') are given by the formula 

for n — r + 2 < % < n. To simplify notations we shall often omit the su- 
perindex (u) when refering to these polynomials. After these explanations 
we shall assume without loss of generality that we have r := n + 1 in the 
statement of Problems 3 and 5. Consequently we restrict the meaning of 
"geometric solving" to the case where we have given as input polynomials 
/i, • • • , fn ^ ^[Xi, . . . , X n ] forming a regular sequence in Q [X 1? . . . , X n ](we 
shall say in the future for short that f±, . . . , f n G 7L[Xi, . . . , X n ] is a regular 
sequence). With these conventions "geometric solving" means the following: 

Definition 10 An algorithm for geometric solving is a procedure which from 
a smooth regular sequence f\, . . . , f n G TL\X\, . . . , X n ] as input produces: 

• a primitive element u of the ring extension Q — ► Q[Xl , . . . , X n ] /(/i, . . . , f n ) 
represented by a TL-linear form U = XiX 1 + • • • + \ n X n 

• the primitive minimal polynomial q u G 2L[T] 

• the parametrizations of the variety V(fi, . . . , /„) by the zeroes of q u , namely 
the (unique) primitive polynomials p^X\ — v[ u \t), . . . ,p^X n — v^(T) 
with pi*\ . . . , p^ non-zero integers and v[ u \ . . . , G 7L[T] which satisfy 
the conditions max{deg v[ u \...,deg v^} < deg q u and (f\, . . . , f n ) = 
{q u ,p^ ) X 1 -v ( t\T),...,p^X n -v^{T)) inq[X u ...,X n }. Moreover, the 
non-zero integer p := Y[7=i Pi e ^> called a discriminant of the input system, 
is a multiple of the discriminant of q u . 

In the sequel we shall refer to the polynomials U = X\X 1 + • • • + \ n X n G 
7L[X u ...,X n ] (with image u in Q [X 1: . . . , X n ]/(f 1: . . . , / n )), q u (T), 
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Vi(T), . . . , v^\T) G 7L[T] and . . . , G Z2 as geometric solution of 
the equation system /i = 0, ...,/„ = 0. 

Let us remark here that this notion of "geometric solving" has a long history, 
which unfortunately we can not give here in full detail for mere lack of space. 
One might consider [15] as an early reference where this notion was implicitly 
used for the first time in complexity theory. 

2.2 Intrinsic Parameters 

We said in the introduction that we are interested in algorithms for geometric 
solving which are able to profit from "good" geometrical properties that an 
input system of polynomial equations might possess. This makes it necessary 
to precise what such "good" geometrical properties may be and how to find 
measures for them. Therefore, we are going to define two geometric invari- 
ants in this subsection that will arise as parameters of the complexity of our 
procedures: the (affine) degree and the (affine) logarithmic height of complete 
intersection varieties. The notion of degree has been taken directly from [27], 
while our notion of height is strongly inspired by the corresponding notion 
developed for projective varieties in [41,42,44-47]. 

Let us first recall the notion of degree of an affine algebraic variety. We begin 
by defining the degree of a zero-dimensional variety and then we extend this 
notion to positive dimensional complete intersection algebraic varieties. 

To fix notations, let V C (D n be an algebraic subset (variety) given as the 
set of common zeroes in (D n of a smooth regular sequence of polynomials 
/i, . . . , fi G 7L[Xi, . . . , X n ] of degree at most d. If V is zero-dimensional (i.e. 
if i — n) the degree of V is defined as the number of points of V (points at 
infinity are not counted in this definition). In the general case (when dim V = 
n — i > 1 holds) let us consider the class V of all affine linear subspaces of 
(D™ of dimension i (defined as the set of solutions in (D n of a linear equation 
system L\ — 0, ... , L n _i = where Lj, = a^iX 1 + ■ • • + ak n X n + a^o is an affine 
linear polynomial with coefficients a^j G TL for 1 < k < n — i and < j < n). 
Let Vy be the subclass of V of all these affine linear spaces H eV such that 
H fl V is a zero-dimensional variety. 

Definition 11 Let notations and assumptions be as before. The degree of V 
is defined as the maximum of the degrees of the intersections of V with affine 
linear spaces belonging to V v . We denote the degree ofV by deg V. 

As observed in [27], this definition of the degree never yields infinity, but 
gives always a natural number. Our definition is equivalent to the following 
one: Consider all linear changes of coordinates in € n defined by non-singular 
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matrices with integer entries, i.e. linear changes of the type 

(X 1 , . . . , X n ) i— > (Yi, . . . , Y n ), 

where Y& = ak\X\ + • • • + a^ n X n is a linear form with integer coefficients for 
1 < k < n. Any generic linear change of coordinates induces an integral ring 
extension as follows: 

Q [Yi, . . . , y n _i] — ► Q [Yi, . . . , y„]/(/i, • • • , /i) = Q [V]. 

It turns out that the ring Q [V] is a free Q [Y 1; . . . , Y ra _j]-module of finite rank 
(cf. [26] for instance). This rank is the same for any generic linear coordinate 
change and it equals the degree of the variety V. 

In order to define the height of an affine diophantine variety, we also consider 
first the zero-dimensional case and then the case of positive dimension. 

To start with let us first say what we mean by the (logarithmic) height of an 
integer, a vector of integers, a matrix over 7L and a polynomial with integer 
coefficients. Let a G 7L be an integer, then the height of a is defined as ht(a) : = 
max{log2\a\ 1 1}. It is obvious that the height measures the bit length of a. 
On the other hand we shall see soon that this simple notion of height of an 
integer has a natural extension to algebraic varieties where it plays a role of 
"arithmetic degree" (see [9,5,21,33,34,45-47]). The main outcome of this paper 
will be the reinterpretation of the notion of height for algebraic varieties as a 
measure for the bit complexity of an elimination procedure. In this sense, our 
contribution justifies a posteriori Northcott's terminology of "complexity" for 
the height of an algebraic variety [56]. 

For a vector of integer numbers a := (a±, . . . , a n ) G 2L n , we define the height 
ht(a) as the maximum of the heights of its coordinates. For a matrix A G 
M. n {7L) with integer entries, its height ht(A) is defined as the height of A as 
vector. Similarly, we define the height of a polynomial / G 7L[Xi, . . . ,X n ] as 
the height of the vector of its coefficients. 

Definition 12 Given a zero- dimensional diophantine algebraic variety V C 
(D™ and a linear form U = XiXi + • • • + A n X n with integer coefficients repre- 
senting a primitive element u of the ring extension Q — > Q [V], we define 
the height of V with respect to U as the maximum of the heights of the poly- 
nomials q u (T),p ( ^ ) X 1 - vf\T), . . . ,pi M) X„ - 4 M) (T) (see Definition 10) and 
denote this height by ht(V; U). 

In our first approach to find a suitable notion of height for algebraic varieties 
we define the height of the given zero-dimensional variety V as the function 
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hty : IN — ► IN which associates to any natural number c G IN the value 
hty(c) := max{ht(V;u) : ht(u) < c} if the ring extension Q — > Q [V] has a 
primitive element of height at most c and which associates to c the value 1 if 
no such primitive element exists. 

This notion of height is related to the hermitian norm and the denominator of 
the points of the variety V. In order to explain this relation, let us introduce 
the following notations : 

Taking into account that the zero-dimensional variety V is contained in (D n , 
we define the norm ||V|| as: 

||V|| := max{||a|| : a G V}. 

Furthermore, a natural number d G IN is called a denominator of V if all 
elements in the set 

d- V := {d-a : a G V} 

have algebraic integers as coordinates. The smallest denominator of V will be 
called the denominator of V and denoted by dy. 

With these notations we are able to state the following height estimation for 
zero-dimensional varieties: 

Lemma 13 There exists a universal constant k > such that for any zero- 
dimensional diophantine subvariety V of <C n and any c G IN the following 
inequality holds: 

ht v {c) < 5 K {c + log 2 {nd v \\V\\)). 
(This means the function ht v is of order hty(c) = 5°^ (c + log^indy \ |V| \))). 

PROOF. Let V C (D n be a zero-dimensional diophantine variety of degree 
5 G IN. The inequality is trivial for hty(c) = 1. Therefore we may suppose 
without loss of generality that the ring extension Q — > Q [V] has a primitive 
element u which is the image of a linear form U = XiXi + • • • + \ n X n G 
7L[Xi, . . . , X n ] of height at most c. We just show the inequality: 

2 w(5«(T)) < (2 c+1 nd v \\V\\y 
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and leave the corresponding inequalities for p\ U 'X 1 — Vi(T),...,p^X n — 
uW(T)) to the reader. Since dy is a denominator for V and u has integer 
coordinates, dy is also a denominator for the set of algebraic numbers u(V) 
contained in €. Therefore, if a±, . . . , as G (D n are the points of V and if T is a 
new indeterminate, the polynomial 

5 

f(T) :=l[(T-dyu(a t )) 

i=i 

has integer coefficients, i.e. /(T) belongs to 7L[T]. Moreover, the polynomial 
f(dyT) vanishes on the set u(V). Since / and q u have the same degree 5 and 
since q u is the primitive minimal polynomial of the image u of U in Q [V] , the 
vanishing of f(dyT) on implies that the existence of a non-zero integer 
b E 7L such that f(T) = bq u (T) holds. Taking into account |6| > 1 and that 
the coefficients of / are elementary symmetric functions in the points of the 
set u(V) C C we deduce the following inequalities: 



2 ht{ qu ) < 2 ht( f ) < (2d v \\u(V)\\) s < (2d v ) 5 (n2 c ) 5 \\V\\ s < (2 c+1 nd v \\V\\) s . 
□ 



Let V be again a zero-dimensional diophantine subvariety of (D n of degree 5. 
We estimate now the quantities dy and ||V||. 

Proposition 14 Let c G IN be a natural number such that the ring extension 
Q — > Q [V] has a primitive element u := X\X\ + • • ■ + \ n X n e 7L\X\, . . . , X n ] 
of height at most c. Then dy and \ \V\\ can be estimated as follows: 

i) 

n 

i=i 

where as is the leading coefficient of q u (T) and n7=i pf^ ^ s ^ e discrim- 
inant obtained from the polynomials in Definition 10. It follows that V 
has denominators of height 0((n + 5)hty(c)). 
ii) the norm \ \V\\ ofV satisfies 

\\V\\< ^/n52 Shty ( c \ 

PROOF. The integer \ag\ is a denominator of the set u(V) because it is 
the leading coefficient of the polynomial q u (T) which defines u(V). Since the 
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polynomials pr X 1 - v[ u) (T), p ( ^X n - v^\T) "parametrize" the variety 
V in function of the zeroes of q u {T), i.e. in function of the set u(V), we 
deduce that |a^ _1 EHLi Pi^\ * s a denominator of V (notice that the degree of 
the polynomials ^^(T), . . . , v^\T) is bounded by 5 — 1). 

^From [38, Chapitre IV, Theoreme 2 (ii)] one deduces : 

\\u(V)\ \ < 2 htv(c \ 
Thus, for a = (a±, . . . , a n ) G V and 1 < k < n we have: 

ki = I?*"* r 1 !^ («(«)) i- 

Since is an integer and Vk (T) is a polynomial of degree at most 5 — 1 and 
of height at most 2 htv ^ c \ we conclude : 

\a k \ < S2 htv ^\\u(V)\\ 6 - 1 < 52 5htv{c) . 

This implies 

:= max{|H| : a E V} < ^2^^. 

Remark 1 T/ie height is deeply related to complexity issues in polynomial 
equation solving. In fact, given a regular sequence of polynomials /i, G 
7L[Xi, . . . , X n ] defining a zero- dimensional diophantine variety V , we have an 
upper bound for the length of the output of any algorithm which solves the 
system f\ = 0, ...,/„ = geometrically, namely: 

(n + l)deg V ht v (c). 

Here we assume tacitly that the output is given by a linear form representing 
a primitive element of the ring extension Q — ► Q [V] and by polynomials 
as in Definition 10 and that these polynomials are given in dense and their 
coefficients in bit representation. 

It is also possible to give an upper bound for the height of zero-dimensional 
complete intersection varieties in terms of purely syntactical properties of its 
defining equations. This is the content of what follows, namely a weak form 
of the so-called arithmetical Bezout theorem ([3,4,8,9,19,45-47,33,34]). 
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Proposition 15 Let f\,...,f n G 7L[Xi, . . . , X n ] be polynomials of degree at 
most d and of height at most h. Suppose they define a zero- dimensional variety 
V := V(fi, . . . , /„). Then the function hty can be estimated as follows: for any 
c G IN we have 

ht v (c) = d° (n) -h-c. 

Proposition 15 is an immediate consequence of [33]. Under the same assump- 
tions as in Remark 1, namely that any algorithm which solves a given zero- 
dimensional complete intersection polynomial equation system returns a prim- 
itive element and polynomials as in Definition 10, we can state the following 
obvious lower bound for the bit length of the output (again we suppose that the 
output polynomials as in Definition 10 are given in dense and their coefficients 
in bit representation): 

Proposition 16 Let fi, . . . , f n £ ^[-Xi, . . . , X n ] be a regular sequence defin- 
ing a zero- dimensional diophantine variety V = V(/i, . . . , /„). Let 
i] := min{ht(V; u) : u is a primitive element of the ring extension Q — > 
Q[V]}. Then, the bit time complexity of any algorithm solving f± — 0, . . . , f n — 
geometrically is at least: 

max{deg V, i]}. 

Let us now consider the case of diophantine complete intersection variety V of 
positive dimension. Let 1 < % < n and let be given a smooth regular sequence 
of polynomials f\, . . . , fi G 7L[Xi, . . . , X n ] defining a (n — i)-dimensional dio- 
phantine complete intersection variety V. Let A/y be the class of all linear 
coordinate changes: 




such that the matrix A = (aij)i<ij< n has integer entries (i.e. A G «M n (2Z), 
where M. n (7L) denotes the ring ofnxn matrices of 7Z), A is non-singular and 
such that the ring extension 

Q [Yi, . . . , y n _j — > Q [Yl, . . . , y n ]/(A, ...,/,) = Q [V] (2) 

is integral. The linear coordinate change given by the matrix A induces a finite 
morphism of affine varieties ir : V — > (D n- \ We consider for any linear form 
U = A n _j + iX n _ i+1 + • • • + \ n X n with integer coefficients such that its image 
u in Q [V] is a primitive element of the ring extension above, the class T u 
of all those points a G 7L n ~ l which have unramified 7r-fiber and for which the 
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image of u in the coordinate ring Q [V a ] of the fiber V a := n 1 ({a}) remains a 
primitive element of the ring extension Q — > Q [V a ] . 

In a more down-to-earth language this means that we ask all the elements of 
V a = 7r _1 (a) to be smooth points of V and the number deg V a of elements of V a 
to be equal to the rank of the free Q [Yi, . . . , Y^_j]-module Q [V]. Furthermore 
we ask the linear form U to generate a primitive element of the ring extension 
Q — > Q [V a ]. (Observe that everything comes together since the smoothness 
of the elements of V a implies that the zero-dimensional Q -algebra Q [V a ] 
is reduced.) Maintaining these notations we model our notion of height of 
algebraic varieties by means of the following function: 

Definition 17 Given V a complete intersection diophantine variety as before, 
a linear change of coordinates A G My, a linear form U G 2L[Y n - i+ i, . . . , Y n ] 
whose image u in <Q [V] is a primitive element of the integral ring extension 
(2) and given a point a G T u , we define the height of V with respect to the 
triple (A, U, a) as: 

ht(V; (A,U,a)) :=ht(V a ;U). 

Our first approximation to the notion of height of a diophantine complete 
intersection variety is given by the function hty : IN — >■ IN which associates 
to any natural number c G IN the value hty(c) := max{ht(V; (A, U, a)) \ 
ht(A, U, a) < c} if the triple (A, U, a) satisfies the assumptions of this defini- 
tion, and which associates to c the value 1 if not. 

2.3 Straight-line Programs 

In the previous subsections we discussed the mathematical form and syntacti- 
cal encoding of the output of an algorithm for geometric solving we are going to 
exhibit. However we also need a suitable encoding for input and intermediate 
results of our algorithm. As mathematical objects our inputs are polynomials 
with integer coefficients / G 2L[Xi, . . . , X n ]. These polynomials can be written 
as lists of monomials and this yields the first two possible encodings for input 
and intermediate results: dense and sparse encoding. Thus, if d is the degree 
of / and if h is an upper bound for its height, the length of / under dense 
encoding is 

*.(';-)-»•(':")■ 

Let us remark that the binomial coefficients appearing in this expression are 
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polynomial in the number of variables in the case of "small" degree polyno- 
mials (e.g. the length of the dense encoding of / is h ■ (™^ 2 ) — h ■ n 2 if the 
degree of / is at most 2). Analogously the length of the dense encoding of / 
is polynomial in d for d » n. 

Alternatively, our input polynomial / may be given by representing just all its 
non-zero coefficients: this is the sparse encoding of the polynomial /. Then, if 
h is a bound of the height, d the degree and iV the number of monomials with 
non-zero coefficients of /, the length of the sparse encoding of / becomes 

h ■ N ■ n ■ log 2 d. 

However, in many practical applications our input polynomials may be given 
as programs. This is for instance the approach in the encoding of the inputs of 
the version of the 3SAT problem (Problem 1) we stated in the introduction. 
In the sequel we shall mainly restrict ourselves to the straight-line program 
encoding of polynomials in the following sense: 

Definition 18 A generic straight-line program V over 7L is a pair V = 
(G,Q), where Q is a directed acyclic graph and Q is an assignment of in- 
structions to the gates (i.e. vertices) of the graph. Q contains n + 1 gates of 
indegree which are Q-labeled by the variables X 1 , . . . , X n and by the constant 
1 G 7L. They are called the input gates ofV. We define the depth of a gate v 
of the graph Q as the length of the longest path joining v and some input gate. 
Let us denote the gates of the directed acyclic graph Q by pairs of integer num- 
bers (i,j), where i represents the depth of the gate and j is the corresponding 
value of an arbitrary numbering imposed on the set of gates of depth i (this 
encoding can be seen in [25,33,39,40,43]). Associated to the gate we have 
the following operation: 

Qi,j '■= ( A ijQrs) ■ ( H B U Qr's'), 

0<r<j-l 0<r'<i-l 

where Alj, Bfj' are indeterminates called parameters ofV and Q rs ,Qr's' ar e 
precomputed values corresponding to the gates (r,s) and (r',s'). 

We denote by A = (A^), B = (B^') the list of all parameters in the straight- 
line program T'. The intermediate results Qij of V are therefore polynomials 
belonging to 7L[A, B, X X) . . . , X n ] and V represents a procedure which evalu- 
ates them. A (finite) set of polynomials f\,...,f s G TL\X\, . . . , X n ] is said to 
be evaluated by a straight-line program of generic type T' with parameters in 
a set T C 7L if specializing the coordinates of the parameters A and B in V 
to values in J 7 , there exist gates ■ ■ ■ , (i s ,js) °f T' such that 
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fk — Qi k j k (a, b, Xi, . . . , X n ) 



holds for 1 < k < s. Specializing in the indicated way the parameters of V 
into values of T we obtain a copy T of the directed acyclic graph Q underlying 
the generic straight-line program V and of its instruction assignment Q. We 
call this copy T a straight-line program (of generic type V ) in 2L[Xi, . . . , X n ] 
with parameters in T . The gates of T correspond to polynomials belonging to 
2L[Xi, . . . , X n ]. These polynomials are obtained from the intermediate results 
Qij of T' by specializing adequately the parameters from which the depend. 
We shall call these polynomials the intermediate results of the straight-line 
program T. Furthermore the polynomials fi, ■ ■ ■ , f s are called (final) results 
or outputs of T. Alternatively, we shall say that fi, . . . , f s are represented, 
computed or evaluated by T. 

The current complexity measures for the generic straight-line program V are: 

• the size of V = the size of the graph Q 

• the non-scalar depth (V) = the depth of the graph Q 

The size and non-scalar depth of the specialized straight-line program V are 
analogously defined. Additionally, for any straight-line program Y in 
7L[Xi, . . . ,X n ] with parameters in T C 7L, we call the the maximum of the 
heights of the elements in T the height of the parameters ofT or, for short, the 
height ofT. The encoding of a polynomial / G TL\X\ } . . . , X n ] by a straight-line 
program T in 7L\X\, . . . , X n ] with parameters of height h has (bit) length 

2(L 2 h + Llog 2 L). 

Note that the notion of straight-line program encoding covers as well both 
notions of dense and sparse encoding of polynomials. This can be seen as 
follows: a polynomial of degree at most d and height at most h, given in dense 
encoding, can be evaluated by a straight-line program of size and 
non-scalar depth Oilog^d^) with parameters of height at most h. Similarly, if a 
polynomial / G 2L[Xi, . . . , X n ] has degree at most d, height h and iV non-zero 
coefficients, it can be evaluated by a straight-line program of size 0(d ■ N) 
and non-scalar depth Oilog^d) with parameters of height at most h. 

2.4 Complexity of geometric solving 

Now that the notions of geometric solving, degree and height of polynomial 
equation systems and straight-line programs and its distinct complexity mea- 
sures have been introduced, we are able to state our main result, namely the 
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following Theorem 19. This theorem represents our principal contribution to 
the solution of Problem 3 in Section 1. 

Theorem 19 There exists a bounded error probabilistic Turing machine that 
from a smooth regular sequence fi, . . . , f n G 7L\Xx, . . . , X n ] outputs a linear 
form U G 2L[Xi, . . . , X n ] representing a primitive element u of the ring exten- 
sion Q — > Q [V], where V := V(f\, . . . , /„) is the algebraic variety defined by 
fi,...,f n , and polynomials of the form q u (T), X 1 - v[ u \T), p { -f>X n - 
v n u \T) with pi*\ . . . , p^f 1 non-zero integers and q u , v[ u \ . . . , v^f> G 7Z[T] such 
that these polynomials represent a geometric solution of the equation system 
fx = 0, ...,/„ = (see Definition 10). The Turing machine finds this solution 
in time (counting the number of bit operations executed) 

(ndhL5r))°« 092n+ V 

using only 

(ndL6)°U 

arithmetic operations in 7L at unit cost. We assume that the polynomials 
fx, ... , f n have degree at most d and that they are given by a straight-line pro- 
gram of size L and non-scalar depth t with parameters of height at most h. The 
quantity S defined by 5 := max{deg V(fi, . . . , fi) : 1 < i < n} is the degree of 
the system f\ = 0, . . . , f n = 0. Finally the quantity r\ is the height of the system 
fx = 0, ...,/„ = defined as r\ := max{htv i { c ^{.i}°92n+ £) -logzS)) : 1 < i < n} 
where C3 > is a suitable universal constant independent of the specific input 
fx, ■ ■ ■ , f n (or even its size). 

Theorem 19 follows from the description of the algorithm given in Section 
3 below. Theorem 4 above follows immediately from Theorem 19 above by 
putting d := 2, L := n, I := 2. Let us remark here that Theorem 19 improves 
and extends the main result of [24] and [25] to the bit complexity model. It 
sheds also new light on the main complexity outcome of the papers [54,20,11]. 

2.5 A Division Step in the Nullstellensatz 

In this subsection we show how Nullstellensatz bounds imply Liouville esti- 
mates. This establishes a close connection between Problems 5 and 6 in the 
Introduction. Let us recall the assumptions in the statement of Theorem 7. 

There is given a smooth regular sequence of polynomials fx, ■ ■ ■ , fn G 
7L\Xx, ■ ■ ■ ,X n ] of degree at most d and of height at most h, defining a zero- 
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dimensional affine variety V := V(f\, . . . , f n ) C (D™. Moreover there is given a 
point a = (ai, . . . , a n ) G V and a real number < e < 1. Finally, we assume 
that D Q = holds. By a well-chosen linear change of coordinates we 
may assume without loss of generality V fl (Q [i] x (D n_1 ) = 0. It is sufficient 
to show that the algebraic number a\ is hard to approximate in the sense of 
the conclusion of Theorem 7. For this purpose consider integers pG 7L[i\ and 
q G IN such that | is an approximation at level e to the algebraic number a±. 

We introduce the following polynomial : 



f n+1 := (qX 1 - p)(qX 1 - p) 

(here p stands for the complex conjugate of p). The assumption V fl (Q [i] x 
(D 1-1 ) = implies that the sequence of polynomials f±, . . . , f n+ i has no common 
zero in (D™. Therefore there exists a non-zero integer b G 7L and polynomials 
gi, . . . , g n+ i G 2Z[Xl, . . . , X n ] such that the following Bezout identity holds : 



b — gifi H hgVH-i/n+i- 

Evaluating this identity at the point a & V we obtain : 



1 < |6| = |^n+i(a)| • l<?«i -P| • k«i -p\- 
This yields the following estimate: 

Proposition 20 With assumptions and notations as before, for any rational 
approximation a := (pi/q, ■ ■ ■ ,p n /q) G Q [i] n at level e to the point a G V we 
have the inequality : 



< || a _ a ||(| ai | + |^|). 



\9n+i(a)\q 2 

In particular, for \ \a — a\ \ < e < 1, we obtain the estimation : 



< q^. 

|5f n+ i(a)|(2||a|| + 1) 

(Here p±, . . . ,p n G 7L[i] are Gaussian integers and q G IN is a natural number.) 

lYiom. the second inequality we deduce that it is sufficient to bound the val- 
ues of ||o;|| and |g n+ i(a)| in order to obtain a Liouville estimate for the ra- 
tional approximation a of the point a. Note that the bounds for ||o;|| and 
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|<7ra+i(aOI which can be easily deduced from the known Nullstellensatze (as 
e.g. in [3,4,33]) would be insufficient for our purpose (proving Theorem 7) as 
they imply only a unspecific general estimate, namely 



for a suitable constant C > 0. A Liouville estimate of this type does not take 
into account the specific properties of the variety V expressed through its 
degree and height. The more specific bounds for ||o;|| and |g ra+ i(a)| as required 
for the proof of Theorem 7 by means of Proposition 20 are an immediate 
consequence of the following result: 

Theorem 21 Let /i, . . . , f n , f n+ \ G 7L[X\, . . . , X n ] polynomials having no com- 
mon zero in € n and verifying the following assumptions: 

• there exists a straight-line program of size L and non-scalar depth £ with 
parameters of height h that evaluates the polynomials f\, . . . , /„, / n+1 

• the degrees of the polynomials f±, . . . , f n+ i are bounded by d and h! is an 
upper bound for their heights 

Let us furthermore assume that fi, ■ ■ ■ , f n form a smooth regular sequence 
which defines a zero- dimensional affine algebraic variety V = V(/i, • • • , f n )- 
We also consider the following quantities: 

• 5:= degiV) 

• 7] :— min ht V (i.e. i] is the minimal value of hty distinct from 1) 

Then there exists a straight-line program of size L(ndS)°^ and non-scalar 
depth of order 0(log 2 n + log 2 d + log 2 S + £) with parameters of height at most 
0(max{h, h' ,r],log 2 n, £}) which evaluates a non-zero integer a G 7L and a 
polynomial g n+ i G 2L[Xi, . . . , X n ] such that 

a — 9n+l ' fn+l 

belongs to the ideal (/i, . . . , J ? n ) generated by fi, . . . , f n in 2L[Xi, . . . , X n ] . 

The proof of this theorem will follow from the description of the algorithm 
given in Section 4 below. Applying Theorem 21 and Lemma 23 below, we 
obtain a more precise upper bound for the value |^„ + i(o;)|. From this bound 
together with Proposition 14 and 20 we then deduce easily Theorem 7. 
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3 An algorithm for Geometric Solving 

The aim of this section is to establish a proof for Theorem 19. We describe 
an algorithm which implies Theorem 19. This algorithm works inductively on 
the codimension of the varieties V$ := V(fi, . . . , fi), 1 < i < n, and our main 
goal is to describe this recursion. 

Recall that our input is a smooth regular sequence f 1 ,...,f n e TL\X X , . . . , X n ] 
of degree at most d. We assume that this input is encoded by a straight-line 
program T of size L and non-scalar depth I with parameters of height at most h 
that evaluates the polynomials fi,...,f n . Our algorithm computes a geometric 
solution of the zero-dimensional algebraic variety V := V(f 1 , . . . , f n ) C (D n . 
In order to describe for 1 < i < n the i-th recursive step of our algorithm, 
we shall refer to the intermediate complete intersection algebraic varieties as 
Vi := V(fi, . . . , fi) and introduce the following parameters: 

• Si := deg(Vi), 

• 5 := max{5i : 1 < i < n}, 

• i]i := htyXC), where C is a suitably chosen natural number of order 
0((log 2 n + £)log 2 S), such that Q [T^] has a primitive element of height C 
with respect to a suitable Noether position of Vi. 

• i] := max{r]i : 1 < i < n}. 

As a byproduct of our algorithm, we shall obtain geometric solutions of the 
algebraic varieties Vi. In fact, our algorithm computes for every KKtia 
S-linear change of coordinates 

(X 1 ,...,X n )^(Y^,...,Y^), 
such that the ring extension 



Ri := Q [Yf , . . . , Y^ t ] — B % := Q [if, . . . , ...,/*)= Q M 

is integral. The i?j- m odule -Bj is a free module of rank say Di < <5j. Let us 
denote by 7Tj : — ► €™ _l the projection on the first n — i coordinates of 
(Yi\ . . . , Y®). The morphism TXi of afline varieties is finite. 

Definition 22 Let assumptions and notations be as before. A lifting point for 
W := Vi of the finite morphism 7Tj is a point P = . . . ,p n -i) G 7L n ~ l with 
the following properties: 



25 



• the zero- dimensional fiber Wp := n^ 1 (P) has degree (i.e. cardinality) equal 
to the rank of R>i as free Ri-module (this means deg(Wp) = Di) 

• the fiber Wp contains only smooth points. (This is equivalent to saying that 
the Jacobian matrix of the polynomials we obtain from 
h(Y®, . . . , y W), . . . , fi(Y^\ . . . , y«) by substituting for y«, . . . , Y^% the 
coordinates p 1 , . . . ,p n -i of P is regular at every point of the fiber Wp.) 

If P e 7L n ~ l is a lifting point of the morphism Tii we will call its fiber Wp a 
lifting fiber of W = Vi. Observe that the elements of a lifting fiber of 7Tj are 
smooth points ofW. 

The lifting fibers Wp have the property that a geometric solution of the variety 
Vi can be reconstructed from the projection 7Tj and any geometric solution of 
the equations of such a fiber, (see Subsection 3.2 below). Our algorithm will 
choose for each 1 < % < n a suitable lifting point Pi G 7L n ~ l of the morphism 
7Tj. In the sequel we shall denote the lifting fiber of this point by V P .. 

The following Section 3 is divided into two two well-distinguished parts, 
namely: 

i) Subsection 3.2, treating "lifting by a symbolic Newton method", where 
we show how it is possible to reconstruct a geometric solution of the 
equations fi, ■ ■ ■ , fi from the lifting fiber Vp v 

ii) Subsection 3.3, where we show how to find a linear coordinate change 

(Xl, . . . , X n ) — > (Yi \ . . . , y„^), the lifting point Pi and a geometric 
solution of the equations of the lifting fiber Vp v 

The i-th recursive step of our algorithm consists of the computation of the 
new variables Y" 1 ^ +1 - ) , . . . , Y^ l+1 ^ , the point P i+ \ and a geometric solution of its 
fiber V Pi+1 from the data Y^\ . . . , y«, i* and V P% . 

Let us conclude this subsection with the following remark: let 1 < i < n and 
consider the lifting fiber V Pi . Since the degree of V Pi equals Di = rank Ri (P>i), 
any !Z-linear form [/, := A n _ i+ iy n ^ i+1 + • • • + X n Y^ which separates the 
points of Vp i represents not only a primitive element of the ring extension 
Q — > Q [VpJ but also a primitive element of the integral ring extension 
Ri Q Bi (which we will denote by Ui). Our algorithm will compute a geometric 
solution of both Vi and V Pi using such a linear form Ui. 

Let us observe that the bit length of our geometric solution of the equations 
of Vp i will be bounded by the quantity 

(1 + 1)^ + 2)7*. 
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3.1 Elementary operations and bounds for straight-line programs 

In this subsection we collect some elementary facts about straight-line pro- 
grams. We start with an estimate for the degree and height of a polynomial 
given by a straight-line program. In order to state our result with sufficient 
generality, let us observe that the notion of height makes sense mutatis mu- 
tandi for polynomials over any domain equipped with an absolute value. 

Lemma 23 ([33]) Let R be a ring equipped with an absolute value \ -\ : R — > 
IR. Suppose f G R[X±, . . . ,X n ] is a polynomial which can be evaluated by a 
straight-line program T in R[X±, . . . , X n ] of size L and non-scalar depth £ with 
parameters of height h. Let H > a real number and let a = (cxi, . . . , a n ) be 
a point in R n such that log 2 \oti\ < H holds for 1 < i < n. Then f and f(a) 
satisfy the following estimations: 

• deg(f) < 2 e 

• ht(f) < (2 m -l).(h + log 2 L) 

• log 2 \f(a)\ < (2 £+1 - 1) • (max{h, H} + log 2 L) 

One of the main ingredients used in our procedure below is the efficient compu- 
tation of the coefficients of the characteristic polynomial of a matrix. We shall 
use for this task Berkowitz' division-free and well parallelizable algorithm [6] 
(compare also [16] and [7] for historical predecessors of this algorithm). This 
is the content of the the next lemma. 

Lemma 24 ([6,33]) Let R be a domain. There exists a straight-line program 
of size and non-scalar depth 0(log 2 N) with parameters in {—1, 0, 1} that 

from the entries of any N x N input matrix over R computes all coefficients 
of the characteristic polynomial of the given matrix. 

We use this algorithm not only for the computation of the characteristic poly- 
nomial of a given matrix but also for the computation of the greatest common 
divisor of two given univariate polynomials with coefficients in a unique factor- 
ization domain (this task can be reduced to solving a suitable linear equation 
system corresponding to the Bezout identity over the ground domain. See [33] 
for details). 

The following result is an immediate consequence of the formal rules of deriva- 
tion: 

Lemma 25 Let R be a domain. For a given a finite set of polynomials fi, ■ ■ ■ , f s 
of R[Xi, . . . , X n ] which can be evaluated by a straight-line program (3 in 
R[Xi,...,X n ] of size L and non-scalar depth £, there exists a straight-line 
program in R[Xi, . . . , X n ] of size (2n + 1)L and non-scalar depth £ + 1 with 
the same parameters as j3 which evaluates fi, ■ ■ ■ , f s and all the first partial 
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derivatives: 



{-^-:l<i<s,l<j<n}. 

Combining this lemma with Lemma 24, one concludes: let fi, ■ ■ ■ , f n be a 
family of polynomials of R[Xi, . . . , X n ] which can be evaluated by a straight- 
line program (5 of size L and non-scalar depth £. Then there exists a straight- 
line program in R[X U . . . , X n ] of size n° {l) L and non-scalar depth 0(£+log2n) 
with the same parameters as f3 which evaluates the Jacobian determinant. 



J(fii ■ ■ ■ ■> fn) '■= det(-^j^-)i<ij< n . 

In some exceptional cases the straight-line programs we are going to con- 
sider might contain divisions as operations. Since we are only interested in 
division-free straight-line programs, the following "Vermeidung von Divisio- 
nen" technique due to V. Strassen [57] becomes crucial: 

Proposition 26 ([33], [57]) Let V be a (division- free) straight-line program 
in 2L[Xi, . . . , X n ] of size L and depth £ with parameters of height h that com- 
putes a finite set of polynomials / , . . . , f m of 7L\Xi, . . . , X n ]. Assume that 
/o ^ holds and that f divides f\ in 7L[Xi, . . . , X n ] for any 1 < % < m. Then 
there exists a (again division-free) straight-line program V in 2L[Xi, . . . ,X n ] 
with the following properties: 

i) V computes polynomials Pi, ... , P m ofTL\X\, . . . , X n ] and a non-zero in- 
teger 9 such that for any 1 < i < m holds 

P = 9^. 
Jo 

ii) V has size of order 0(2 2£ (L + n + 2 e + m)), depth of order 0(£) and its 
parameters have height of order max{/i, 0(£)}. 

Moreover, the height of 9 is of order: 



2° (e) {max{h,£} + log 2 L). 

The proof of this proposition is based on the computation of the homogeneous 
components of a polynomial given by a straight-line program. This proof also 
provides an algorithm computing the homogenization of a polynomial given 
by a straight-line program. This is the content of the next lemma. 
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Lemma 27 ([33]) Suppose that we are given a polynomial 
P := P^ 1 . . . X£ n in 7L[Xi, . . . , X n ] which can be evaluated by a straight 
line program T of size L and depth £ with parameters in a given set T C TL. 
Let be given a natural number D. Then there exists a straight line program 
V in 2L[Xi, . . . , X n ] which computes all the homogeneous components of P 
having the following properties: V uses parameters from T , has size (D + l) 2 
and non-scalar depth 11. 

In Section 4 we shall work with a specific polynomial which we call the pseudo- 
jacobian determinant of a given regular sequence. We introduce now this poly- 
nomial and say how it can be evaluated. Let R be a domain containing Q . Let 
K be the field of fractions of R and let /i, ...,/„ G R[X 1 , . . . , X n ] be a regular 
sequence in K[X±, . . . , X n ]. Furthermore, let Y±, . . . ,Y n be new variables. We 
write Y = (Yi, . . . , Y n ). Fix 1 < j < n. By ff ] := fj(Yi, . . . , Y n ) we denote 
the polynomial from fj substituting the variables X±, . . . , X n by Y±, ... , Y n . In 
the polynomial ring R[Y ± , . . . , Y n , Xi, . . . , X n ] we decompose the polynomial 
fj Y ^ — fj in the following (non-unique) way: 

n 

fj Y) - fj = Y1 lk,j{Y k - X k ), 
k=l 

with Ik j G R[Yi, . . . , Y n , Xi, . . . , X n ]. Let us consider the determinant A of the 
matrix A = (k,j)i<k,j<n, namely: 

A := det(A). 

This determinant is called the pseudo-jacobian determinant of the regular se- 
quence of polynomials /i, If d is a bound for the degrees of f±, . . . , / n and 
these polynomials are given by a straight-line program (3 of size L and non- 
scalar depth £, then there is a straight-line program (3' of size (nd)°^L and 
non-scalar depth Oifog^n + £) which evaluates the pseudo-jacobian determi- 
nant A. The straight-line program f3' uses apart from the same parameters as 
f3 only parameters of TL of height 0(log 2 d). 

We shall also consider the execution of straight-line programs in matrix rings. 
The situations where we apply these considerations will be of the follow- 
ing type: Let R be a domain. Suppose that there is given a polynomial 
g G R[Xi, . . . , X n ] by a straight-line program (3 in R[X 1: . . . , X n ] of size 
L and non-scalar depth £. Suppose also that there are given n commuting 
D x D matrices Mi, . . . ,M n over R. In such a situation the entries of the 
matrix g{M\, . . . , M n ) can be computed from the entries of of M\, . . . , M n and 
the parameters of (3 by a straight-line program (3' in R of size D°^L and 
non-scalar depth 0(£). The parameters of (3' are just the values 0, 1 (see [26] 
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for details). 

Another important aspect of our main algorithm is its probabilistic (or alter- 
natively its non-uniform) character. This is the content of the next definition 
and proposition. 

Definition 28 Let be given a set of polynomials W C 7L[Xi, . . . , X n \. A finite 
set Q C HI 1 is called a correct test sequence (or questor set) for W if for any 
polynomial f belonging to W the following implication holds: 

f(x) = for all x G Q implies f = 0. 

Denote by W(n, L, £) the class of all polynomials of 2Z[Xl, . . . , X n ] which can 
be evaluated by straight-line programs of size at most L and of non-scalar 
depth at most £. The following result says that for the class W(n, L, £) exist 
many correct test sequences of moderate length. 

Proposition 29 ([31,33]) Let be given natural numbers n, £, L with L > n+1 
and consider the following quantities: 

u := (2 m - 2) (2* + l) 2 and t := 6 (£L) 2 . 

Then the finite set {1, . . . ,u} nt C 7L nt contains at least u nt (1 — u~i) correct 
test sequences of length t for W(n, L, £). In particular the set of correct test 
sequences for W(n, L, £) of length t containing only test points from {1, . . . , u} n 
is not empty. 

^From Lemma 23 we deduce the following complexity estimate: 

Let / G 2L[Xi, . . . , X n ] be a polynomial given by a straight-line program of size 
L and non-scalar depth £ with parameters of height h. Let a G 7L n be a point 
of height h' given in bit representation. Then there exists a (deterministic) 
ordinary Turing machine which computes the bit representation of the value 
f(a) in time (2 e Lmax{h, h'})°^. 

In the next subsection we shall make use of a problem adapted version of the 
Hensel- Newton iteration. We are now going to describe a suitable division-free 
symbolic form of this procedure. 

Let R be a polynomial ring over Q , let K be its field of fractions and 
let fi, ■ ■ ■ , f n G R[Xi,...,X n ] be polynomials of degree at most d. Sup- 
pose that fi, ■ ■ ■ , f n ar e given by a (division- free) straight-line program (5 
of size L and non-scalar depth £. Let us also assume that the Jacobian matrix 
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W):=W„...,/„):=(lt, ,, , 
We consider now the following Newton-Hensel operator: 



of the polynomials /i, ...,/„ is regular. 



•V/l-V, V„) : 





/ 




- D(f)- 1 




\ 



/f 1 (X 1 ,...,X n )\ 

V fn(Xi, . . . , X n ) ) 



(3) 



This operator is given as a vector of n rational functions of K(Xi, . . . ,X n ). 
This is also true for the k-th iteration of this operator, which we denote by Nf. 

For any k G IN there exist numerators (g[ k \ . . . , g^) G R[Xi, . . . , X n ] and a 
non-zero denominator G R[Xi, . . . ,X n ] such that Nf can be written as: 



(fc) 



eK(x 1 ,...,x n ) n . 



The next lemma gives a description of a division-free straight-line program in 
R[Xi, . . . , X n ] that evaluates numerators and denominators for Nf. 

Lemma 30 Let notations and assumptions be as before. Let k be a natu- 
ral number. There exists a straight-line program in R[Xi, . . . , X n ] of size 
0(kd 2 n 7 L) and non-scalar depth Oiifog^n + £)k) with the same parameters 
as (3 which evaluates numerators g[ h \ . . . ,gW and a (non-zero) denominator 
^(fc) j or k.foid iteration Nf of the Newton-Hensel operator Nf. 



PROOF. Let A(f) = {aij)i<i,j<n be the transposed matrix of the adjoint 
matrix of D(f). Both A(f) and the Jacobian determinant J(f) := det(D(f)) 
can be evaluated by a straight-line program of size 0(n 5 + nL) and non-scalar 
depth Oilog^n + £), as it can be seen just by combining Lemma 24 and 25. 
We can write the operator Nf as 



N f 







( 


J(f) 




-A(f) 




Kxj 


\ 



/ f 1 (X 1 ,...,X n )\ 

\fn(Xi, . . . , X n ) J 



Af) 



(4) 



The entries of the matrix A(f) are polynomials of the ring R[Xi, . . . , X n ] 
having degree at most (n — l)(d — 1). Moreover, the Jacobian determinant 
J(f) is a polynomial of R[X ± , . . . ,X n ] having degree at most n(d — 1). For 
1 < i < n we consider 
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ft := J(f)Xi ~^2 a i,jfr 



All polynomials appearing on the right hand side of the definition of ft as 
summands have degree bounded by v :— nd + 1. Thus the degree of any ft is 
bounded by v. Let h ft(Xo, X±, . . . , X n ) e -R[X"o, . . . , X„] be the homogeniza- 
tion of ft by a new variable Xq and let h J(f)(Xo, X\, . . . , X n ) e -R[X"o, . . . , X„] 
be the homogenization of the Jacobian determinant «/(/) by Xo. 

We introduce now the following homogeneous polynomials (forms): 

• Gj(X , . . . , X n ) := Xq deg ^ 9l \ h gi), 

. H(X ,...,X n ) :=X u ' de9(J, \ h J(f)). 

According to Lemma 27, there exists a division-free straight-line program in 
R[Xi, . . . , X n ] of size 0(d 2 (n 7 +n 3 L)) and non-scalar depth 0(/oftn+£) which 
evaluates the forms G±, . . . , G n , H. We now define recursively the following 
polynomials: 

• for k = 1, 1 < % < n let ft (1) := X u . . . , X n ), := Xi, . . . , X n ), 

• for fc > 2, 1 < i < n let ft (fc) := G i (^ fc - 1 >, # . . . , 

It is easy to see that these polynomials g[ k \ . . . , ft^ are numerators and that 
the polynomial is a denominator of the iterated Newton-Hensel operator 
Nf. A straight-line program evaluating them is obtained by iterating k times 
the straight-line program which computes G±, . . . , G n and H . No new param- 
eters are introduced by this procedure. Putting all this together we get the 
complexity bounds in the statement of Lemma 30. □ 



3.2 Lifting fibers by the symbolic Newton-Hensel algorithm 



The idea of using a symbolic adaptation of Newton-Hensel iteration for lifting 
fibers was introduced in [24] and [25] . For technical reasons, in these papers it 
was necessary to use algebraic parameters for the lifting process. We present 
here a new version of this lifting algorithm in which the use of algebraic num- 
bers is replaced by a certain matrix with integer entries. The whole procedure 
therefore becomes completely rational. The new lifting process is described in 
the statement of the next theorem and its proof. 

Let notations and assumptions be as the same as at the beginning of this sec- 
tion. We fix 1 < i < n and assume for the sake of notational simplicity that the 
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variables X±, . . . , X ra are already in Noether position with respect to the vari- 
ety Vi, the variables Xi, . . . , X n _i being free. We suppose that the lifting point 
Pi, the coordinates of the 7L- linear form Ui and a geometric solution for the 
equations of the lifting fiber V P . are explicitly given. With these conventions 
we state the main result of this subsection as follows: 

Theorem 31 There exists a (division- free) straight-line program T{ in the 
polynomial ring 2L[X 1 , . . . ,X n _i, Ui] of size (id5iL)°^ and non-scalar depth 
0((log 2 i + £)logib~i) using as parameters 

• the coordinates of Pi 

• the integers appearing in the geometric solution of the equations of the lifting 
fiber Vp i and 

• the parameters of the input program Y 

such that the straight-line program Tj computes 

• the minimal polynomial qi G 7L[X\, . . . , X n ^i, U] of the primitive element u t 
of the ring extension Q[Xi, . . . , X n _i] — ► Q[V^] = Q[Xi, . . . , X n ]/ (f 1 ,...,f i ), 

• polynomials pS_ i+1 , ■ ■ ■ , p^ e 7L\X X ,..., X n _i], p := f[ pf and Voly- 

k=n— i+1 

nomials f^+i, • • • , v$ G 2L[Xi, . . . , X n _i, Ui] with max{degu i v < f 1 ; r < j < 
n} < 5i such that 

(/i, • • • , fi) P = (qi(Ui),p^ +1 X r+1 - v^UUi), • • • , P^Xn ~ v%\Ui)) p 

holds. Without loss of generality we may assume that Tj represents the coeffi- 
cients of the polynomials qi and t^+i, • • • > v n^ w ^h respect to U. 

PROOF. Under our hypotheses, namely that X 1 , . . . , X„are in Noether po- 
sition with respect to the variety Vi, the variables X±, . . . , X n _i being free, we 
have the following integral ring extension of reduced rings: 

R t := Q [X u . . .,X n .i] £?, := Q [X ± , . . .,X n ]/{h, f t ). 

Let Pi = (pi, . . . ,p n -i) £ 7L n ~ l be a lifting point of the morphism i\i and 
let Vp i = n^ 1 {Pi) be its lifting fiber. We have deg Vp i = Di = rank^Bi < 

deg Vi = 5i. Let U = \ n - i+1 X n _ i+1 H h A n X n G 7L[X n _ i+l , . . . ,X n ] generate 

a primitive element of the ring extension Q — > Q [VpJ (i.e. U separates the 
points of VpJ. The minimal polynomial of the image of U in B>i has degree 
at least the cardinality of the set U^VpJ. Since the linear form U separates 
the points of Vp v this cardinality is deg Vp i = rank^Bi. We conclude that U 
generates also a primitive element of the ring extension Ri — > B{. 
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In the sequel we denote the primitive element generated by the linear form Ui 
in the ring extensions Q — > Q [VpJ and Ri — > Bi by the same letter -Uj. 

By hypothesis the following data are given explicitly (i.e. by the bit represen- 
tation of their coefficients): 

• the primitive minimal equation, say q E7L\T] of the primitive element u,i of 

• the parametrization of Vp i by the zeroes of q, given by the equations 

X x - pi = 0, . . . , X n _i - p n ^i = 0, q(T) = 0, 
Pn-i+lX n -i + i — V n -i+i(T) = 0, . . . , p n X n — v n (T) = 0, 

where v n -i + i, . . . , v n are polynomials of 7L[T] of degree strictly less than Di = 
deg q and p n _j + i, . . . , p n are non-zero integers. Check again Definition 10 to see 
that the polynomials p n ^ i+ iX n - i+ i — v n -i+i(T), . . . ,p n X n — v n (T) are assumed 
to be primitive. 

Let a E 7L be the leading coefficient of q. 

We consider now /i, ...,/, as polynomials in the variables X n _ i+1 , . . . , X n , i.e. 
as elements of the polynomial ring Ri[X n _ i+ i, . . . , X n ]. Let / := (/i, ...,/«) 
and let 



D(f) : 



'dfk 
dX 



J / l<k<i 

n— z+l<j<n 



be the corresponding Jacobian matrix of / (with respect to the variables 
X n _ i+ i, . . . , X n ). Recall that the Newton operator with respect to these vari- 



ables is defined as 



N f 



n— i+1 



V x v 




Let ftbea natural number. Using Lemma 30 we deduce the existence of nu- 
merators Qn-i+i, ■ ■ ■ ,9n an d a non-zero denominator h in the polynomial ring 
Ri[X n _ i+ i, . . . , X n ] such that the following /t-fold iterated Newton operator 
has the form: 



N f 



I g-n-i+l \ 
h 



V t ) 
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Now, let Mx n _ i+1 , • • • , Mx n be the matrices describing the multiplication ten- 
sor of the Q -algebra Q [VpJ (recall that by assumption a geometric solution 
of the polynomial equation system defining Vp. is given and that therefore the 
matrices M Xn _ i+1 , ■ ■ ■ , M Xn are known). 

Let M denote the companion matrix of the polynomial a _1 g(T) G Q [T]. Let 
n — i + l<j<n. The following identity is immediate: 



Pj M Xj = Vj {M). 

Moreover the matrices pja Di ~ l M X] have integer entries. Let re :— 1 + log-^i 
and note that re > 1 + log 2 Di holds. Our straight-line program Tj will execute 
re Newton steps in a subroutine which we are going to explain now: Let us 
consider the following column vector of matrices N n _ i+1 , . . . , N n with entries 
in Q(Xi,...,X n _i): 



/ A r \ / gn-i + lC-^l .■■■■^■i.-.,M) v 

' J Vi+l \ [ ^(Xi,...,X„_ i ,M) \ 

: := JVjf(M) = 
V N n J 



\ 



ffn(Xl,...,X n _^M) 

h(X 1 ,...,X n _ i ,M) 



where M = (M Xn _ i+1 , • • • , and g n ^ i+ i, . . . , g n are the numerator and h 

the denominator polynomial of Lemma 30. Finally, let us consider the matrix 



M := Ui(N n _ i+1 , ...,N n ) = \ n _ i+1 N n _ i+1 + ■■■ + \ n N n . 

This matrix is a matrix whose entries are rational functions of . . . , X n _j). 

From the fact that Pj = (pi, . . . ,p n -i) is a lifting point and from the proof of 
Lemma 30 one deduces easily that in fact the entries of M. belong to the local 
ring 



R Pt :- (Ri)( Xl ~ Pl ,...,x n ^- Pn ^) - Q [Xi, . . . ,X n _ i ](x 1 - Pl ,...,x„_ i -p„_ i )- 

Let T be a new variable. With these notations and assumptions we have the 
following result: 

Lemma 32 Let \ £ Q (X±, . . . , X n _j)[T] be the characteristic polynomial of 
M. and m Ui G Ri[T] the minimal integral equation of the primitive element 

Di-l Di-l 

Ui of Bi over F^. Let x(T) = T D * + £ a k T k and m Ui = T D * + £ hT k 

k=0 k=0 

with ak,bk G Q (Xi, . . . , X n _j) /or < k < Dj — 1. T/ien a// t/iese coefficients 
satisfy the condition ordp t (ak — b k ) > 5i + 1, where ordp i denotes the usual 
order function (additive valuation) of the local ring R Pi . 
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PROOF. Let V Pi = . . . , £ Di ] and fix 1 < I < A- Let := A(6)- Because 
of the hypothesis made on the lifting fiber Vp i and from Hensel's Lemma (which 
represents a symbolic version of the Implicit Function Theorem) we deduce 
that there exist formal power series R^!_ i+1 , . . . , R$ G <C[[Xi — pi, . . . , X n „j — 
p n _i]] with i^ +1 (P;) = d'li+i, • • • , ^°(P) = &° such that for it>« := (X 1 - 
Pi, . . . , - p n _i, . . . , R®) the identities 

/ 1 (i2W) = 0,...,/ i (i2W)= (5) 

hold in €[[X! - Pl , . . . ,X n _, - p n _i]]. Let := A(# (0 ) = \ n _ i+1 R®_ i+1 + 
• • • + \ n RV\ As shown in [24] the minimal polynomial m Ui of the primitive 
element Ui verifies in (D[[Xl — pi, . . . , X n _j — p n _j]][T] the identity 

™m = II (^-« ( °)- (6) 

1<I<D, 

Let us now consider the construction above which produces the matrix M. G 
(-Rp i ) DiXDi starting with the matrix M G Q DiX -°' (recall that M is the 
companion matrix of the polynomial a~ 1 q(T) G Q [T]). The same construc- 
tion transforms the A distinct eigenvalues of the diagonalizable matrix M, 
namely the values Q = 1 < / < A, into eigenvalues of .M. (Observe 

that by construction M. is a rational function of the matrix M and there- 
fore the same rational function applied to any eigenvalue of M produces an 
eigenvalue of M). As shown in [24], in this way we obtain A distinct ra- 
tional functions G C(Xl, . . . ,X„_i), which are eigenvalues of At. More- 
over these rational functions are all defined in the point Pi (this means that 
G C[Xi,...,X n _ i ](x 1 - pi ,...,x„_ i -p„_ i ) holds). For 1 < / < A the rational 
functions can therefore be interpreted as elements of the power series ring 
C[[Xi — pi, . . . , X„_j — p n -i]\ and they satisfy in this ring the condition 

u (9_fi(0 G (Xi-p!,...^^-^)^ 1 . (7) 
(For a proof of these congruence relations see [24]). 

Let us now consider the characteristic polynomial x °f the matrix M.. Since 
the coefficients of M belong to i? Pi = Q [X u . . . , X n _ i ](x 1 - P1 ,...,x„_ i - P „_ i ), the 
coefficients of x do too. Therefore x can be interpreted as a polynomial in the 
variable T with coefficients in the power series ring Q[[Xi— pi, . . . , X n _i— p n _j]]. 
From the fact that the rational functions u' 1 ', . . . ,u^ Di ^ represent A distinct 
eigenvalues of .M we deduce that 

X (T)= J] ( T -« ( °) (8) 

1<KD; 
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holds. Let a k denote the fc-th elementary symmetric function in Di argu- 
ments. The identity (8) implies that for < k < Di — 1 we can write the 
coefficient of x(T) as a k = (— l) Di ~ k a k (u ( - 1 \ . . . , u( D ^). /,From the iden- 
tity (6) we deduce that the k-th coefficient b k of the polynomial m Ui satisfies 
b k = (— l) Di " k <Jk{u^\ . . . , vS D ^). From the congruence relations (7) and the 
identities (6) and (8) we conclude now that for < k < Di — 1 the congruence 
relations 

a k - b k e (Xi -pi,..., X n _i - p n -i) &l+1 (9) 
hold in Q [[X\ — p±, . . . , X n _j — p n _i]]. This proves the lemma. □ 

We continue now the proof of Theorem 31. In order to see how to evaluate the 
coefficients of x, let us consider 9 := det(h(M)) G Ri and the matrix 

M x := 9M. 

This matrix Mi has entries in Ri. Now we have the identities 



det(T ■ Id Di -M)= det{T ■ Id Di - 9~ 1 Mi) = 9- D *det{{9T)Id Di - Mi). 

Let 0(T) = T D - + foi-iT *- 1 + ■ ■ ■ + (j) e Ri[T] be the characteristic polyno- 
mial of Mi- From the identities above we deduce that for < k < Di — 1 the 
fc-th coefficient of x can be written as 

e k $ k 

Executing k — 1 + logi&i steps in the Newton iteration at the beginning of 
this proof to produce the entries of the matrix M, 9, M and finally Mi (in 
this order) and applying Lemma 24 we produce a straight-line program T£ 
in Q (Xi, . . . , X n _i) of non-scalar size 0(log 2 Sid 3 i 6 L) and non-scalar depth 
0{{log2i + £)log25i) using as parameters those given by the statement of 
Theorem 31 such that T- evaluates the family of polynomials 1, 9, . . . , 9 Di , 

0o, • • • , <t>Di-i e Ri- 

Now, applying Strassen's Vermeidung von Divisionen technique (Proposition 
23) we obtain a division-free straight-line program T" in Q [Xi, . . . , X n _j\ of 
size {id5iL) 0( ^\ non-scalar depth 0{{log-2t + t)log25i) using as parameters the 
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coordinates pi, ■ ■ ■ ,p n -i of Pi, the coefficients of the linear change of coordi- 
nates for the Noether normalization for Vi, the rational numbers appearing as 
coefficients in the geometric solution of the lifting fiber Vp. and the parameters 
of T such that T" evaluates for each < k < D { — 1 the expansion of a k in 
Q [[Xi — pi, . . . , X„_j — Pn-i]} up to terms of degree of order 5i + 1. Taking into 
account the congruence relations (9) we see that the division-free straight-line 
program V- evaluates polynomials g , . . . , gD,-i £ Q [X±, . . . , X n „J such that 

b k - g k E (Xi - pi, . . . , X n _i - p n -i) h+l 

holds in Q [[Xi — p±, . . . ,X n _i — p n -i\] for any < k < Dj — 1. /,From [24] 
we deduce that the degrees of the coefficients b k of the minimal polynomial 
m Ui E Ri[T] do not exceed <5j. Putting all this together, we conclude that 

h = 9k 

holds for any < k < Di — 1. This means that the division-free straight- 
line program T" computes the coefficients of the polynomial qi := m u . G 
Q[X 1 ,...,X r ,U i ] = R i [U i ]. 

In order to compute the parametrizations v^_ i+1 , . . . , v$ G . . . , X n _j, T] 

we have to use the same kind of techniques (namely truncated Newton-Hensel 
iteration) combined with the arguments developed in [33] and applied in [24] 
and [25]. Let us be more exact: 

Let n — i + 1 < k < n and let mx k G Ri[Xk] be the minimal polynomial 
of the i?j-linear endomorphism given by the image of X^ in the i?j-algebra 
Bi = <Q[Vi\ = <Q[Xi, . . . , X n \/ (/i, . . . , fi). The polynomial m Xk is monic and 
hence squarefree. We compute the coefficients of the polynomial mx k G Ri[Xk] 
in the same way as before the coefficients of g« = m Ui . So, we have two monic 
squarefree polynomials mx k G Ri[Xk] and qi G Ri[Ui\. Taking into account 
that Ui separates the associated primes of the ideal (mx k ,qi) in Ri[Xk,Ui], 
we can apply directly [33, Lemma 26] in order to obtain the parametrization 
associated to the variable X^. Doing the same for each of the variables involved, 
namely the variables X n _ i+1 , . . . , X n , and putting together the corresponding 
straight-line programs, we obtain a procedure and a straight-line program Tj 
of the desired complexity which computes the output of Theorem 28. □ 

3.3 The recursion 

Proposition 33 There exists a division-free arithmetic network of non- scalar 
size of order (idSiL) ^ and non-scalar depth 0((log2i+£)log25i) using param- 
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eters of logarithmic height bounded by max{h,r]i,0((log2i + i)log25i)} which 
takes as input 

• a Noether normalization for the variety Vi, 

• a lifting point Pi and 

• a geometric solution of the lifting fiber V Pi 
and produces as output 

• a linear change of variables (X 1; . . . , X n ) — ► (y} 1+1 \ . . . , Y^ l+1 ^) such that 
the new variables Yi +l \ . . . , Y^ +r) are in Noether position with respect to 
Vi+i, 

• a lifting point P i+i for Vi+i and 

• a geometric solution for the lifting fiber Vp i+1 . 

PROOF. The construction of the arithmetic network proceeds in three stages. 
In the first stage we apply the algorithm underlying Theorem 28. In the second 
stage we intersect algorithmically the variety Vi with the hypersurfcae V(/j+i) 
in order to produce first a Noether normalization of the variables with respect 
to the variety V i+ \ — Vi n V{f i+1 ). Then we produce a linear form U i+i repre- 
senting a primitive element Ui+i of the integral ring extension Ri+i — > B i+ i 
and a straight-line program representing polynomials analogous to the one in 
the conclusion of Theorem 28. For this purpose we use the algorithm under- 
lying the proof of Proposition 14 in [24]. The only point we have to take care 
of is that we are working now over the ground field Q and that we have to 
take into account the heights of the parameters of Q we introduce in this 
straight-line program. 

We remark that the straight-line program in question has non-scalar size 
(idSiL) ^ and non-scalar depth 0(log 2 (d5i) + £) with parameters of loga- 
rithmic height bounded by 0(log 2 (d5i) + £). In the third and final stage we 
consider the polynomial 

J(fi...,fi+i):=det(^-) 

\OyVj J i<fc<i+i 

which is a nonzero divisor modulo the ideal 7j + i = (/i, . . . , /j+i). Let us observe 
that the polynomial J(/i . . . , fi+i) can be evaluated by a division-free straight- 
line program of length 0((i + l) 5 + L) and depth 0(log 2 (i + 1) + 1). 

Let /i G K[Xi, . . . , X„_j_i] be the constant term of the characteristic polyno- 
mial of the homothety given by J(/i . . . , fi+i) modulo ij+i. Since J represents 
a nonzero divisor modulo ij+i we conclude that \x does not vanish. Furthermore 
we observe that \i can be evaluated by a division-free straight-line program in 
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Q[Xi, . . . , X n _i_x] of length (iSiL)°^ and depth 0(log 2 d5 i +(log2i+£)log 2 5 i ) = 
0((log2i+£)log25i), and so does the product p-p, where p = T7 Pj is defined 

n—i+l 

as in the statement of Theorem 28. 

Using a correct test sequence (see [31]) we are able to find in sequential 
time (iSL)°^ and parallel time 0((log 2 i + t)log28i) a rational point P i+i G 
rgn-i-i Q £ i g ar ithmic height bounded by 0((log 2 i + i)log 2 5i) which satisfies 
(p ■ p)(Pi + i) 7^ 0. Clearly, Pj+i is a lifting point for the variety Vi + \. In order 
to obtain a geometric solution of Vp i+1 with primitive element Ui + \ induced by 
the linear form [/j+i we have to specialize in the point Pi+\ the polynomials 
obtained as output of the second stage (see [24, Section 3]). By this specializa- 
tion we obtain the binary representation of the coefficients of certain univariate 
polynomials in C/j+i which represent a geometric solution of the fiber Vp i+1 . 
Nevertheless it might happen that the height of these coefficients is excessive. 
In order to control the height of these polynomials we make them primitive. 
This requires some integer greatest common divisor (gcd) computations which 
do not modify the asymptotic time complexity of our algorithm. □ 



4 Lifting Residues and Division modulo a Complete Intersection 
Ideal 

This section is dedicated to the proof of Theorem 21. The outcome is a new 
trace formula for Gorenstein algebras given by complete intersection ideals. 
This trace formula makes no reference anymore to a given monomial basis 
of the algebra. Our trace formula represents an expression which is "easy-to- 
evaluate" . 

4-1 Trace and Duality 

Trace formulas appear in several recent papers treating problems in algorith- 
mic elimination theory. Some of these papers use a trace formula in order to 
compute a quotient appearing as the result of a division of a given polyno- 
mial modulo a given complete intersection ideal (see [22,33]). Other papers 
use trace formulas in order to design algorithms for geometric (or algebraic) 
solving of zero- dimensional Gorenstein algebras given by complete intersection 
ideals ([1,2,14]). The paper [48] uses a trace formula to obtain an upper bound 
for the degrees in the Nullstellensatz. 

However, all these applications of trace formulas require the use of some gener- 
ating family of monomials of bounded degree which generate the given Goren- 
stein algebra as a vector space over a suitable field. As a consequence, such 



40 



trace formulas provide just syntactical complexity or degree bounds and in 
particular no intrinsic upper complexity bound (as e.g. in Theorem 21) can 
be obtained in this way. In this subsection we introduce an alternative trace 
formula in order to get a maximum benefit from the geometrically and alge- 
braically well suited features of Gorenstein algebras. Let us start with a sketch 
of the trace theory. For proofs we refer to [36], Appendices E and F. 

Let R be a ring of polynomials over a given ground field (for our discussion 
the ground field may be assumed to be Q ). Let K be the quotient field of R 
and let R[X ± , . . . ,X n ] be the ring of n-variate polynomials with coefficients 
in R. Let f\, ...,/„ be a smooth regular sequence of polynomials in the ring 
R[Xi, . . . , X n ] of degree at most d in the variables X±, . . . , X n generating a 
radical ideal denoted by (/i, . . . , /„). 

Consider now the i?-algebra B given as the quotient of R[X±, . . . , X n ] by this 
ideal: 

B := R[Xi, . . . ,X„]/(/i, . . . , f n )- 

We assume that the morphism R — + B is an integral ring extension repre- 
senting a Noether normalization of the variety V(j\, . . . , /„) defined by the 
polynomials /i, ...,/„ in a suitable affine space. Thus, B is a free i?-module 
of rank bounded by the degree of the variety V(fi, . . . , /„) (this estimation is 
very coarse but sufficient for our purpose). 

Moreover, the i?-algebra B is Gorenstein and the following statements are 
based on this fact. 

We consider B* := Homn(B, R) as a -B-module by the scalar product 

B x B* — ► B* 

which associates to any (b, r) in B x B* the i?-linear map b ■ t : B — ► R 
defined by {b • t)(x) := r(bx) for any element x of B. 

Since the i?-algebra B is Gorenstein, its dual B* is a free S-module of rank 
one. Any element a of B* which generates B* as 5-module is called a trace 
of B. There are two relevant elements of B* that we denote by Tr and o. 
The first one, Tr, is called the standard trace of B and it is defined in the 
following way: given b G B, let i] b : B — ► B the i?-linear map defined by 
multiplying by b any given element of B. The image Tr(b) under the map 
Tr is defined as the ordinary trace of the endomorphism rji, of B (note that 
this definition makes sense since B is a free i?-module). In order to introduce 
a (which will be a trace of B in the above sense), we need some additional 
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notations. For any element g G R[Xi, . . . , X n ] we denote by g its image in B, 
i.e. the residue class of g modulo the ideal (/i, . . . , f n ). Let Y 1; . . . , Y n be new- 
variables and let Y := (Y 1 , . . . , Y n ). Let 1 < j < n and let fj := fj(Y ± , . . . , Y n ) 
be the polynomial of R[Yi, . . . , Y n ] obtained by substituting in fj the variables 
Xi, . . . , X n by Yi, . . . , Y n . Let us consider the polynomial 



fj -fj = H hk(Y k — X k ) G 1R [X u ...,X n ,Y u ...,Y n ], 

k=i 

where the Ijk are polynomials belonging to R[X ly . . . , X n , Y 1; . . . , Y n ] having 
total degree at most (d— 1) (observe that the Ijk are not uniquely determined 
by the sequence fi, . . . , /„). Let us now consider the determinant A of the 
matrix (ljk)i<j,k<n which can be written (non uniquely) as 

A = a m (Xi, . . . , X n )b m (Yi, . . . , Y n ) G 1R[Xi, . . . , X n , Y±, . . . , Y n ], 

m 

with the a m being elements of R[X ± , . . . , X n ] and the b m elements of R[Yi, . . . , Y n ] 
(Observe that it will not be necessary to find the polynomials a m and b m aleg- 
braically, we need just their existence for our argumentation.) The polynomial 
A is called a pseudo-jacobian determinant of the regular sequence (f\, . . . , f n ). 
Observe that the polynomials a m and b m can (and will) be chosen to have de- 
grees bounded by n(d — 1) in the variables X ± , . . . , X n and Yi, . . . , Y n respec- 
tively. Let c rn G R[Xi, . . . ,X n ] be the polynomial we obtain by substituting 
in b rn the variables Yi, . . . , Y n by Xi, . . . , X n . For J the class of the Jacobian 
determinant J(/i, . . . , /„) in B we have the identity 

J ^ t dm ' Cm- 

m 

Moreover the image of the polynomial A in the residue class ring 
R[X U . . . , X n , Yi, . . . , Y n ] modulo the ideal (/i, . . . , /„, ff, ■ . . , f%) is indepen- 
dent of the particular choice of the matrix (lkj)i<k,j<n- This justifies the name 
"pseudo-jacobian" for the polynomial A. With these notations there is a 
unique trace a G B* such that the following identity holds in B: 

1 = ^<j(a m ) ■ Cm. 

m 

The main property of the trace a, known as "trace formula" ("Tate's trace 
formula" [36, Appendix F], [37] being a special case of it) is the following 
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statement: for any g G R[X±, . . . , X n ] the identity 

9 = J2 a (d ■ 4) • c m (10) 

m 

holds true in B. Let us observe that the polynomial Y^ m (T {9 ' ^m) ' c m £ 
i?[X l5 . . . , X„] underlying the identity (10) is of degree at most n(d — 1) in the 
variables X 1? . . . , X n . 

The main use of this trace formula consists in solving the following problem: 

Problem 34 (Lifting of a residual class) Given a polynomial 

g G R[Xi, . . . , X n ] of arbitrary degree in Xi, . . . , X n , find a polynomial g\ G 
R[Xi, . . . , X n ] of degree at most n(d—l) in the variables X ± , . . . , X n such that 
gi — g holds in B. 

As we have seen before, the trace formula (10) solves Problem 34 since it 
allows us to choose for g\ the polynomial 

91 ■= J2 a (9 ■ d m ) ■ C m - (11) 

m 

However, defining the polynomial g\ by the formula (11) inhibits us from 
taking advantage of any special "semantical" features of the i?-algebra B: one 
"a priori" needs all monomials of degree at most n(d — 1) for the description 
of the polynomials c m (and a m ). Therefore, we replace the trace formula (10) 
by the following alternative one: 

Proposition 35 (Trace Formula) With the same notations as before, let 
us consider the free R[X±, . . . , X n ]-module B[X±, . . . , X n ] given by extending 
scalars in B (this means we consider the tensor product B[Xi, . . . , X n ] := B®r 
R[Xi, . . . ,X n ]) and let us also consider the polynomial A 1 G R[X ± , . . . ,X n ] 
given by: 

Ai := ^a m ■ c m G B[X ± , . . .,X n \. 

m 

Then for any g G R[X 1 ,...,X n ] the following identity holds true in 
R[X±, . . ■ ,X n ]: 

J2 v(g ■ d m ) ■ c m = Tr(J~ l g ■ A ± ). 

m 

(Here Tr := Tr <g> Id R [ Xu ...,x n ] '■ B[X ± , ...,X n ] — > R[X ± , . . . , X n \ is the stan- 
dard trace obtained from the standard trace Tr : B — > R by extending scalars). 
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PROOF. Let Tr : B — > R be the standard trace of the free -R-module B. 
Let us recall from [36, Appendix F] that for any g G R[X ± , . . . , X n ] the identity 

TriJ-'g) = a(g) 

holds. From the R[Yi, . . . , Y^]-linearity of the map Tr : B[Y±, . . . , Y n ] — > 
R[Yi, . . . , Y n ] we deduce that any g G -R[Xl, . . . , X„] satisfies the identities 



TriJ-'gA^Y,, ...,Y n )) = J2 TAr x ga m • 6 m ) = E H J' 1 gam) • 6 m - 
In other words we have in R[Yi, . . . , Y n ] 

TriJ^gA^, . . . , Y n )) = £ • a m ) • b m 

m 

for any ^ G -R[Xl, . . . , X„]. Replacing in this identity the variables Y±, . . . , Y n 
by Xi, . . . , X n we obtain the desired formula 



Tr(J' 1 gA 1 ) = J2 a (9- O • c m • □ 



One sees easily that for any h G R[Xi, . . . , X n , Yj_, . . . , F n ], Tr(/i) is simply the 
standard trace of the image h of h in the R\Yi, . . . , y ra ]-module B[Yi, . . . , 
This observation together with Proposition 31 represents our basic tool for 
the evaluation of formula (11) and hence for the solution of Problem 34. This 
is the content of the following observations. 

Let us consider the i^-algebra B' — K (E)r B obtained by localizing B in the 
non-zero elements of R. Fix a basis of the finite dimensional iT-vectorspace 
B' . Let M Xl , ■ ■ ■ ,M Xn be the matrices of the homotheties rj Xi ■ B' — > B' 
with respect to the given basis of B' and let Tr denote the function which 
associates to a given matrix its usual trace. With these conventions let g\ be 
defined as 

9l := TriJif,, ...../;, )U/ Vl MxS 1 • g(M Xl , . . . , M Xn ) 

■A(M Xl , M Xn ,X 1 , X n )). (12) 



One easily verifies that g\ belongs to R[X±, . . . , X n ] and that g\—g holds in 
B. 
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4-2 A Division Step 

The lifting process presented in the last subsection is now applied to compute 
the quotient of two polynomials modulo a reduced complete intersection ideal. 
More precisely, let us consider / G R[Xi, . . . ,X n ] a polynomial which is not 
a zero-divisor in B and another polynomial g G R[Xi, . . . ,X n ] such that the 
residual class / divides the residual class g in B. The following proposition 
shows how we can compute a lifting quotient q G R[Xi, . . . , X n ] for the division 
of g by / in B. 

Proposition 36 (Division Step) Let notations and assumptions be the same 
as in the previous subsection and let D be the rank of B as free R-module. Let 
be given the following items as input: 

• a straight-line program V of size L and depth t representing the polynomials 
f,g and f u . . . , f n . 

• the matrices M Xl , • • • , M Xn describing the multiplication tensor of B with 
respect to the given basis of B' = K <S>r B. 

Suppose that f is a non-zero divisor of B and that f divides g in B. Then 
there exists a division-free straight-line program Y in K[Xi, . . . ,X n ] of size 
L(ndD)°W and non-scalar depth 0(£ + log 2 D + log 2 n) which computes from 
the entries of the matrices Mx 1 , • • • , Mx n and the parameters of V a non-zero 
element 9 of R, and a polynomial q of R[X 1 , . . . ,X n ] such that 9 divides q in 
R[Xi, . . . , X n ] and such that qf = 9g holds in B. 



PROOF. In order to prove this result, let us observe that any basis of B as 
free i?-module induces a basis of B[Yi, . . . , Y n ] as free R\Yi, . . . , F n ]-module. 
Moreover if M Xi is the matrix of the multiplication by Xi in B with re- 
spect to a given basis, M Xi represents as well the multiplication by Xi in 
B[Yi, . . . ,Y n ] with respect to the same basis. Next, since the polynomials / 
and J(fi, . . . , f n ) are not zero-divisors modulo (fi, . . . , /„), the following ma- 
trices are non-singular: 



F 1 :=f(M Xl , 




J\ := det( 



(M Xl , 



, M X n ))l<i,j<n- 



dX j 



Finally, let us denote by G\ and Ai the following two matrices: 
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d :=g(M Xl ,...,M Xn ), 



and 

A 1 :=A(M Xl ,...,M Xn ,Y 1 ,...,Y n ), 

where A is the pseudojacobian determinant of f\, . . . , f n . Let us remark that 
the matrices iq, J\ and G\ have entries in K while Ai has entries in 
K[Yi, . . . ,Y n ]. From formula (12) of the previous subsection we deduce that 
qi : = Tr(Jf 1 • Ff 1 • Gq • Ai(Xi, . . . ,_X n )) is a polynomial of R[X U ...,X n ] 
which satisfies in B the identity q~if = g in B (by Tr we denote here the 
ususal trace of matrices). 

Finally, let us transpose the adjoint matrices of F 1 and J x : 

F 2 := t Adj(F 1 ), and J 2 := Adj^). 

The quotient q G R[X 1 ,...,X n ] and the non-zero constant 6 G R we are 
looking for are given as follows: 

• q := Tr(F 2 ■ J 2 • G ± ■ A x ) 

• := rfet(F 2 ) • det(J 2 ) 

Clearly, the polynomial q± is the quotient of |, while g/ = % holds in B. 
Moreover q can be computed by a division-free straight-line program T in 
K[Xi, . . . , X„] from the entries of M Xl , . . . , Mx n and the parameters of T' 
(note that for the computation of q\ we need divisions). The complexity bounds 
in the statement of Proposition 36 follow by reconstruction of the straight-line 
programs that evaluate f,g,J(fi,...,f n ),A and the determinants involved 
(cf. Subsection 3.1 above). 

Proof of Theorem 21 

In order to prove Theorem 21 we just follow the algorithm underlying the 
proof of Proposition 36. We have to add just some comments concerning the 
matrices M Xl , . . . , M Xn . Let us consider a linear form u = X±Xi + • • • + \ n X n 
(with Aj G 7L) inducing a primitive element of the zero-dimensional Q-algebra 
Q [Xl, . . . , X n ]/(fi, . . . , f n ). In this case R will be the field Q . Let q u G 
7L\T\ be the minimal polynomial of u and p\X\ — V\{T\ . . . , p n X n — v n (T) 
the parametrizations of the variety with respect to this primitive element. Let 
a be the leading coefficient of q u and p = Yi7=i Pi a discriminant. Then the 
companion matrix of q u has the form 
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oT x M, 



where M is a matrix with integer entries. Now, the matrices describing the 
multiplication tensor of Q [Xi, . . . , X n ]/ (f±, . . . , f n ) can be written as 

M Xi = P' 1 ■ v^a^M) 

for 1 < i < n. Taking g — 1 and / = f n+ i in Proposition 36 we obtain 
and q G Q [Xi, . . . , X n ] such that 

6-l-q- f n+1 G (/i,...,/ n ) 

holds. Finally, multiplying by appropriate powers of a and p we obtain a 
non-zero integer a and a polynomial g n+ i of the form 

a a N p M -OeTL g n+1 := a N p M q G 7L[X U ...,X n ], 

such that a — g n+ if n+ i G (/i, . . . , / n ) holds. The bounds of the Theorem 21 are 
then obtained from the bounds of Proposition 36. The bounds for the height 
of the parameters are obtained simply by choosing an appropriate primitive 
element u such that q u and the parametrizations have height equal to the 
minimal height of the diophantine variety V := V(fi, . . . , /„). □ 
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